CVE Catalog

CVE-2017-1000003

Critical
Published: Translated: NVD NIST

Summary

ATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check vulnerability in the Social Application, Module, and Alternative Content components, resulting in privilege escalation.

Risk Assessment

The organization may be exposed to unauthorized access to system resources and functions, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade to the latest version of ATutor to mitigate these vulnerabilities and implement additional access control measures.

Original NVD description (English source)

ATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check vulnerability in the Social Application component resulting in privilege escalation. ATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check vulnerability in the Module component resulting in privilege escalation. ATutor versions 2.2.1 and earlier are vulnerable to a incorrect access control check vulnerability in the Alternative Content component resulting in privilege escalation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS